$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa File: 8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa (raw, json) Hash identifier: K+FYN2oelyXtt0CZBMZO1tDKfCdG6j4SQOqjA5w+OXU= Subject key identifier: E5:F5:B1:11:52:6A:AF:03:D6:85:9E:63:5D:56:A4:F1:5A:01:BA:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8958C1AD783BBB950400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396617 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:58:c1:ad:78:3b:bb:95:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=37aadf48-0a1f-40a7-b41e-a5ec2eea862d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cb:3b:0c:87:28:4b:0d:0a:6e:11:6e:02:e3: 56:e7:3f:26:ac:ff:24:a1:89:22:42:79:99:0b:b0: 63:47:4b:6f:7e:53:bf:59:cf:45:74:56:5b:b1:fb: d0:7e:33:08:70:ee:53:d7:a1:fe:6c:dd:16:0c:86: 9c:7c:9a:f7:05:40:26:9a:cc:99:94:0c:5c:93:71: 48:d9:bf:86:00:5a:8e:a2:8c:fb:01:8d:c9:96:3a: b2:e4:4b:08:a5:f4:67:3a:87:71:67:e4:e0:08:39: 20:b1:8b:b7:39:6d:95:cd:8a:71:14:75:37:34:e4: 4b:65:f0:e2:06:d3:19:5f:fe:02:d3:62:be:e1:5b: 81:2f:be:a1:c0:3a:df:5d:c4:c5:3f:58:2a:7f:a9: de:46:1f:92:f6:27:e0:c8:da:73:87:04:e6:84:58: e0:55:3f:90:85:52:eb:bf:a1:a7:d1:3b:ff:8f:c8: 5c:9a:f7:34:99:51:2c:4c:21:6e:07:aa:82:52:47: 6d:cd:64:74:13:bb:c8:3f:c4:78:99:07:1c:bf:5e: d8:9a:c0:08:06:31:4f:56:8a:c1:fa:9f:b5:6c:6c: 11:60:fd:b4:20:c8:00:46:71:b8:28:75:54:73:64: ff:ee:32:6f:01:4f:ab:27:be:6c:52:aa:24:21:06: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F5:B1:11:52:6A:AF:03:D6:85:9E:63:5D:56:A4:F1:5A:01:BA:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3c:c6:b7:b1:ec:94:10:a1:7c:8a:ca:07:b9:f7:be:c1:72: 37:c4:29:ba:0c:ce:30:36:7b:23:dc:4b:bf:f3:bc:a6:24:9e: 76:2a:e8:44:cf:42:3f:b0:98:97:d1:95:0d:3c:25:b4:1f:13: 92:ec:0b:19:28:f9:c4:86:10:57:48:3a:31:57:db:f1:a9:28: 80:66:e0:7d:9d:87:23:56:49:59:c3:66:93:58:36:cd:fd:c1: b1:b1:19:a4:47:83:09:9d:42:4c:a0:58:d8:9e:99:a9:d7:87: 3b:92:c8:88:05:40:ab:9d:4b:59:d3:78:e0:92:bd:6a:d4:b2: a7:33:ab:dd:f5:99:03:7e:e0:0a:ee:a7:07:98:79:e7:06:f9: 5b:bf:92:83:46:46:91:da:56:90:69:bf:75:20:56:b1:cb:4c: b0:46:f0:70:2d:30:34:0d:44:c3:52:79:62:ac:f8:fd:ab:34: 7a:5b:15:6b:c9:49:64:29:b0:9d:d2:d8:e8:39:de:46:d4:0b: 7d:83:33:e0:03:f3:96:8d:e8:8c:2b:83:a4:8c:a1:b8:db:36: 88:6f:d4:ab:7b:25:b6:6a:bc:e3:05:d7:59:e3:d4:82:92:56: e1:a1:51:53:2a:df:ab:07:8e:36:11:24:22:a4:21:f3:a9:d0: 16:d9:88:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4lYwa14O7uVBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MzdhYWRmNDgtMGExZi00MGE3LWI0MWUtYTVlYzJlZWE4NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgss7DIcoSw0KbhFuAuNW5z8mrP8koYkiQnmZ C7BjR0tvflO/Wc9FdFZbsfvQfjMIcO5T16H+bN0WDIacfJr3BUAmmsyZlAxck3FI 2b+GAFqOooz7AY3Jljqy5EsIpfRnOodxZ+TgCDkgsYu3OW2VzYpxFHU3NORLZfDi BtMZX/4C02K+4VuBL76hwDrfXcTFP1gqf6neRh+S9ifgyNpzhwTmhFjgVT+QhVLr v6Gn0Tv/j8hcmvc0mVEsTCFuB6qCUkdtzWR0E7vIP8R4mQccv17YmsAIBjFPVorB +p+1bGwRYP20IMgARnG4KHVUc2T/7jJvAU+rJ75sUqokIQYRwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOX1sRFSaq8D1oWeY11WpPFaAbpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU2OTIzZjMtNGExNS0z N2E5LTljMjMtMTJmOGI0YzI3NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLPMa3seyUEKF8isoHufe+wXI3xCm6DM4wNnsj3Eu/87ymJJ52KuhE z0I/sJiX0ZUNPCW0HxOS7AsZKPnEhhBXSDoxV9vxqSiAZuB9nYcjVklZw2aTWDbN /cGxsRmkR4MJnUJMoFjYnpmp14c7ksiIBUCrnUtZ03jgkr1q1LKnM6vd9ZkDfuAK 7qcHmHnnBvlbv5KDRkaR2laQab91IFaxy0ywRvBwLTA0DUTDUnlirPj9qzR6WxVr yUlkKbCd0tjoOd5G1At9gzPgA/OWjeiMK4OkjKG42zaIb9SreyW2arzjBddZ49SC klbhoVFTKt+rB442ESQipCHzqdAW2YhM -----END CERTIFICATE-----Generated at Sun May 11 05:29:33 2025 by rpki-client